[ 148.354932][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 148.358673][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '[localhost]:23882' (ED25519) to the list of known hosts. 2026/07/08 04:48:12 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 166.469178][ T5620] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 172.376899][ T5380] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 172.387755][ T5380] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 172.395663][ T5380] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 172.402945][ T5380] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 172.409766][ T5380] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.511683][ T5380] Bluetooth: hci0: command tx timeout [ 176.590158][ T5380] Bluetooth: hci0: command tx timeout [ 193.407491][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.444319][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.649964][ T1062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.687821][ T1062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.971845][ T5668] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.988565][ T5668] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.004397][ T5668] bridge_slave_0: entered allmulticast mode [ 207.021589][ T5668] bridge_slave_0: entered promiscuous mode [ 207.036488][ T5668] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.051377][ T5668] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.055691][ T5668] bridge_slave_1: entered allmulticast mode [ 207.069275][ T5668] bridge_slave_1: entered promiscuous mode [ 207.123872][ T5668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.143495][ T5668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.201714][ T5668] team0: Port device team_slave_0 added [ 207.214220][ T5668] team0: Port device team_slave_1 added [ 207.271659][ T5668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.278247][ T5668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.310297][ T5668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.321185][ T5668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.330110][ T5668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.360157][ T5668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.441297][ T5668] hsr_slave_0: entered promiscuous mode [ 207.447901][ T5668] hsr_slave_1: entered promiscuous mode [ 208.141200][ T5668] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 208.175129][ T5668] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 208.187264][ T5668] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 208.210928][ T5668] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 208.224618][ T5668] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 208.251417][ T5668] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 208.266746][ T5668] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 208.296295][ T5668] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 208.578251][ T5668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.632172][ T5668] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.662147][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.665580][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.727248][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.731137][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.659320][ T5668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.793842][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.799757][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 210.277163][ T5668] veth0_vlan: entered promiscuous mode [ 210.307463][ T5668] veth1_vlan: entered promiscuous mode [ 210.373403][ T5668] veth0_macvtap: entered promiscuous mode [ 210.391311][ T5668] veth1_macvtap: entered promiscuous mode [ 210.428346][ T5668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.458639][ T5668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.478596][ T1062] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.491645][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.502935][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.511030][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/07/08 04:49:02 executed programs: 0 [ 212.751080][ T4654] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.767410][ T4654] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.774674][ T4654] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.784089][ T4654] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.791925][ T4654] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.866479][ T5380] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.883344][ T5380] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.896154][ T5380] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.913008][ T5380] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.930304][ T5380] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.021821][ T5380] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.040307][ T5380] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.048596][ T5380] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.058073][ T5380] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.064832][ T5380] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.233358][ T5668] syz-executor (5668) used greatest stack depth: 16368 bytes left [ 213.329815][ T5380] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.346635][ T5380] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.369070][ T5380] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.382359][ T5760] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.390367][ T5760] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.407727][ T4654] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.438506][ T4654] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.448251][ T4654] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.457583][ T4654] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.467291][ T4654] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.809414][ T4654] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 213.824414][ T4654] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 213.834787][ T4654] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 213.847087][ T4654] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 213.854755][ T4654] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 214.365521][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.690814][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.832973][ T5380] Bluetooth: hci0: command tx timeout [ 214.990924][ T5380] Bluetooth: hci1: command tx timeout [ 215.151566][ T5380] Bluetooth: hci2: command tx timeout [ 215.228127][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.422495][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.471244][ T5380] Bluetooth: hci3: command tx timeout [ 215.551580][ T5380] Bluetooth: hci4: command tx timeout [ 215.951429][ T5380] Bluetooth: hci5: command tx timeout [ 216.198283][ T13] bridge_slave_1: left allmulticast mode [ 216.201227][ T13] bridge_slave_1: left promiscuous mode [ 216.204613][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.211614][ T13] bridge_slave_0: left allmulticast mode [ 216.214520][ T13] bridge_slave_0: left promiscuous mode [ 216.217896][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.456361][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.464368][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.470442][ T13] bond0 (unregistering): Released all slaves [ 216.869077][ T13] hsr_slave_0: left promiscuous mode [ 216.882988][ T13] hsr_slave_1: left promiscuous mode [ 216.886115][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.889587][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.903689][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.907550][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.911378][ T5380] Bluetooth: hci0: command tx timeout [ 216.931157][ T13] veth1_macvtap: left promiscuous mode [ 216.942580][ T13] veth0_macvtap: left promiscuous mode [ 216.945587][ T13] veth1_vlan: left promiscuous mode [ 216.948011][ T13] veth0_vlan: left promiscuous mode [ 217.071948][ T5380] Bluetooth: hci1: command tx timeout [ 217.230298][ T5380] Bluetooth: hci2: command tx timeout [ 217.255596][ T13] team0 (unregistering): Port device team_slave_1 removed [ 217.274186][ T13] team0 (unregistering): Port device team_slave_0 removed [ 217.552977][ T5380] Bluetooth: hci3: command tx timeout [ 217.631896][ T5380] Bluetooth: hci4: command tx timeout [ 218.030262][ T5380] Bluetooth: hci5: command tx timeout [ 218.547291][ T5000] 8021q: adding VLAN 0 to HW filter on device eth10 [ 218.990333][ T5380] Bluetooth: hci0: command tx timeout [ 219.150244][ T5380] Bluetooth: hci1: command tx timeout [ 219.310227][ T5380] Bluetooth: hci2: command tx timeout [ 219.318138][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.332024][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.335688][ T5756] bridge_slave_0: entered allmulticast mode [ 219.343862][ T5756] bridge_slave_0: entered promiscuous mode [ 219.442427][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.450356][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.458287][ T5767] bridge_slave_0: entered allmulticast mode [ 219.473959][ T5767] bridge_slave_0: entered promiscuous mode [ 219.485930][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.491644][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.495074][ T5756] bridge_slave_1: entered allmulticast mode [ 219.499227][ T5756] bridge_slave_1: entered promiscuous mode [ 219.555710][ T5000] 8021q: adding VLAN 0 to HW filter on device eth11 [ 219.558991][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.564324][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.567665][ T5767] bridge_slave_1: entered allmulticast mode [ 219.572135][ T5767] bridge_slave_1: entered promiscuous mode [ 219.630035][ T5380] Bluetooth: hci3: command tx timeout [ 219.658486][ T5756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.710210][ T5380] Bluetooth: hci4: command tx timeout [ 219.747702][ T5756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.764147][ T5752] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.767500][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.771660][ T5752] bridge_slave_0: entered allmulticast mode [ 219.775609][ T5752] bridge_slave_0: entered promiscuous mode [ 219.780374][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.784956][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.788221][ T5772] bridge_slave_0: entered allmulticast mode [ 219.793648][ T5772] bridge_slave_0: entered promiscuous mode [ 219.804911][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.842685][ T5752] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.846714][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.851368][ T5752] bridge_slave_1: entered allmulticast mode [ 219.855961][ T5752] bridge_slave_1: entered promiscuous mode [ 219.874333][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.877806][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.882019][ T5772] bridge_slave_1: entered allmulticast mode [ 219.887009][ T5772] bridge_slave_1: entered promiscuous mode [ 219.910852][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.943181][ T5751] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.956557][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.961945][ T5751] bridge_slave_0: entered allmulticast mode [ 219.967294][ T5751] bridge_slave_0: entered promiscuous mode [ 220.028880][ T5756] team0: Port device team_slave_0 added [ 220.045764][ T5756] team0: Port device team_slave_1 added [ 220.048735][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.054057][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.057407][ T5751] bridge_slave_1: entered allmulticast mode [ 220.064585][ T5751] bridge_slave_1: entered promiscuous mode [ 220.074323][ T5752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.087094][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.105107][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.110343][ T5380] Bluetooth: hci5: command tx timeout [ 220.113556][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.116916][ T5768] bridge_slave_0: entered allmulticast mode [ 220.123024][ T5768] bridge_slave_0: entered promiscuous mode [ 220.248757][ T5752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.285579][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.324616][ T5767] team0: Port device team_slave_0 added [ 220.330546][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.342214][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.351093][ T5768] bridge_slave_1: entered allmulticast mode [ 220.361652][ T5768] bridge_slave_1: entered promiscuous mode [ 220.368436][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.381147][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.412539][ T5756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.436780][ T5751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.506165][ T5767] team0: Port device team_slave_1 added [ 220.567033][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.579169][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.604949][ T5756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.613447][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.619294][ T5752] team0: Port device team_slave_0 added [ 220.626663][ T5772] team0: Port device team_slave_0 added [ 220.649365][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.656710][ T5000] 8021q: adding VLAN 0 to HW filter on device eth12 [ 220.682502][ T5752] team0: Port device team_slave_1 added [ 220.687076][ T5772] team0: Port device team_slave_1 added [ 220.704151][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.753561][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.757513][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.770331][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.801089][ T5751] team0: Port device team_slave_0 added [ 220.827342][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.832787][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.846578][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.882106][ T5751] team0: Port device team_slave_1 added [ 220.885423][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.889275][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.902950][ T5752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.911257][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.917636][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.930861][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.946851][ T5768] team0: Port device team_slave_0 added [ 220.964768][ T5756] hsr_slave_0: entered promiscuous mode [ 220.969297][ T5756] hsr_slave_1: entered promiscuous mode [ 220.985770][ T5752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.989644][ T5752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.001287][ T5752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.009012][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.013093][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.025051][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.050415][ T5768] team0: Port device team_slave_1 added [ 221.070158][ T5380] Bluetooth: hci0: command tx timeout [ 221.125277][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.128833][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.142015][ T5751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.190178][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.193631][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.204918][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.228647][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.232129][ T5380] Bluetooth: hci1: command tx timeout [ 221.234659][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.247243][ T5751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.266661][ T5767] hsr_slave_0: entered promiscuous mode [ 221.276930][ T5767] hsr_slave_1: entered promiscuous mode [ 221.289518][ T5767] debugfs: 'hsr0' already exists in 'hsr' [ 221.323668][ T5767] Cannot create hsr debugfs directory [ 221.392800][ T5380] Bluetooth: hci2: command tx timeout [ 221.404254][ T5772] hsr_slave_0: entered promiscuous mode [ 221.413725][ T5772] hsr_slave_1: entered promiscuous mode [ 221.419542][ T5772] debugfs: 'hsr0' already exists in 'hsr' [ 221.430143][ T5772] Cannot create hsr debugfs directory [ 221.433407][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.440606][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.467491][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.658349][ T5752] hsr_slave_0: entered promiscuous mode [ 221.671874][ T5752] hsr_slave_1: entered promiscuous mode [ 221.678704][ T5752] debugfs: 'hsr0' already exists in 'hsr' [ 221.690026][ T5752] Cannot create hsr debugfs directory [ 221.710573][ T5380] Bluetooth: hci3: command tx timeout [ 221.790493][ T5380] Bluetooth: hci4: command tx timeout [ 221.838379][ T5000] 8021q: adding VLAN 0 to HW filter on device eth13 [ 221.886787][ T5768] hsr_slave_0: entered promiscuous mode [ 221.891172][ T5768] hsr_slave_1: entered promiscuous mode [ 221.895308][ T5768] debugfs: 'hsr0' already exists in 'hsr' [ 221.898082][ T5768] Cannot create hsr debugfs directory [ 221.988800][ T5751] hsr_slave_0: entered promiscuous mode [ 221.995306][ T5751] hsr_slave_1: entered promiscuous mode [ 221.998496][ T5751] debugfs: 'hsr0' already exists in 'hsr' [ 222.004525][ T5751] Cannot create hsr debugfs directory [ 222.190446][ T5380] Bluetooth: hci5: command tx timeout [ 222.804795][ T5756] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.819298][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 222.837306][ T5756] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.848170][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 223.052771][ T5756] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 223.065847][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 223.084552][ T5756] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 223.108986][ T5756] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 223.638676][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.804439][ T5756] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.836897][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.840220][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.879678][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.883340][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.812384][ T5752] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 224.843270][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 224.867227][ T5752] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 224.883948][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 224.897058][ T5752] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 224.915738][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 225.026646][ T5752] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 225.037912][ T5752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 225.875849][ T5752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.906819][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.028323][ T5752] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.127261][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.131220][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.165474][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.168699][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.219026][ T5751] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 226.258286][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 226.304858][ T5751] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 226.328009][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.361599][ T5751] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 226.383173][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 226.390848][ T5751] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 226.406340][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 226.569171][ T5756] veth0_vlan: entered promiscuous mode [ 226.716880][ T5756] veth1_vlan: entered promiscuous mode [ 226.743562][ T5767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 226.764623][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 226.778537][ T5767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 226.798218][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.827409][ T5767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 226.848728][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 226.878806][ T5767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 226.898511][ T5767] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 227.335189][ T5772] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 227.381045][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 227.428231][ T5772] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 227.456243][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 227.497739][ T5772] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 227.524978][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 227.533564][ T5756] veth0_macvtap: entered promiscuous mode [ 227.646479][ T5772] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 227.664813][ T5772] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 227.693907][ T5756] veth1_macvtap: entered promiscuous mode [ 227.947790][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.975702][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.018855][ T5768] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 228.045762][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 228.061212][ T5768] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 228.092560][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 228.116627][ T5768] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 228.139262][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 228.183537][ T5768] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 228.219696][ T5768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 228.262921][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.356253][ T1060] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.381783][ T1060] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.425504][ T1060] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.443312][ T1060] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.567184][ T5751] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.612815][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.616691][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.733342][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.777922][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.781264][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.037090][ T5752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.117794][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.156579][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.175889][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.254265][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.258058][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.388797][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.392239][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.414184][ T5790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.431997][ T5790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.561068][ T5752] veth0_vlan: entered promiscuous mode [ 229.623050][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.805132][ T5752] veth1_vlan: entered promiscuous mode 2026/07/08 04:49:20 executed programs: 12 [ 229.913711][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.994004][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.158784][ T1060] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.162202][ T1060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.208247][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.269210][ T1060] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.273078][ T1060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.379750][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.382984][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.519688][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.523139][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.567035][ T5752] veth0_macvtap: entered promiscuous mode [ 230.693762][ T5752] veth1_macvtap: entered promiscuous mode [ 231.006307][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.144785][ T5752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.305255][ T1168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.335333][ T1168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.387576][ T1168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.417707][ T1168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.259004][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.301441][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.527973][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.542032][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.556458][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.193939][ T5751] veth0_vlan: entered promiscuous mode [ 233.354661][ T5751] veth1_vlan: entered promiscuous mode [ 233.522457][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.875735][ T5751] veth0_macvtap: entered promiscuous mode [ 233.942091][ T5751] veth1_macvtap: entered promiscuous mode [ 234.191268][ T5767] veth0_vlan: entered promiscuous mode [ 234.237288][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.358799][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.393236][ T5767] veth1_vlan: entered promiscuous mode [ 234.502718][ T1168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.525473][ T1168] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.572772][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.606092][ T1168] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.635146][ T1168] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.795995][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.187136][ T5767] veth0_macvtap: entered promiscuous mode [ 235.314420][ T5767] veth1_macvtap: entered promiscuous mode [ 235.656719][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.699027][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.778767][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.167095][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.220068][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.254116][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.332050][ T1168] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.377039][ T1168] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.433176][ T1168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.474661][ T30] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/07/08 04:49:27 executed programs: 15 [ 237.489813][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.531410][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.682412][ T5772] veth0_vlan: entered promiscuous mode [ 237.983957][ T1062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.015296][ T1062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.143830][ T5768] veth0_vlan: entered promiscuous mode [ 238.178684][ T5772] veth1_vlan: entered promiscuous mode [ 238.469231][ T5768] veth1_vlan: entered promiscuous mode [ 238.884233][ T5772] veth0_macvtap: entered promiscuous mode [ 238.937199][ T5772] veth1_macvtap: entered promiscuous mode [ 239.008671][ T5768] veth0_macvtap: entered promiscuous mode [ 239.052788][ T5768] veth1_macvtap: entered promiscuous mode [ 239.083817][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.143838][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.659213][ T5790] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.683698][ T5790] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.752412][ T5790] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.782169][ T5790] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.845278][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.964735][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.171698][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.204063][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.298000][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.356449][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.750731][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.811340][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.315896][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.371029][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/07/08 04:49:33 executed programs: 21 [ 242.779395][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.836286][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.173478][ T5790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.228270][ T5790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/07/08 04:49:38 executed programs: 29 2026/07/08 04:49:44 executed programs: 37 2026/07/08 04:49:49 executed programs: 47 2026/07/08 04:49:57 executed programs: 55 [ 271.244364][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 271.247238][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 2026/07/08 04:50:11 executed programs: 61 2026/07/08 04:50:17 executed programs: 79 [ 289.013864][ T6329] loop0: detected capacity change from 0 to 32768 2026/07/08 04:50:24 executed programs: 85 2026/07/08 04:50:32 executed programs: 100 2026/07/08 04:50:37 executed programs: 112 [ 289.417175][ T6329] workqueue: Failed to create a rescuer kthread for wq "gfs2-delete/syz:syz": -EINTR [ 308.545558][ T6397] loop0: detected capacity change from 0 to 32768 [ 308.930743][ T6397] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 308.997268][ T6397] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 310.729361][ T6397] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 310.795802][ T804] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 310.870000][ T804] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 311.753874][ T804] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 883ms [ 311.826530][ T804] gfs2: fsid=syz:syz.0: jid=0: Done [ 311.851225][ T6397] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 311.905817][ T6397] gfs2: fsid=syz:syz.0: can't create logd thread: -4 2026/07/08 04:50:43 executed programs: 120 2026/07/08 04:50:48 executed programs: 127 [ 320.120906][ T6438] loop0: detected capacity change from 0 to 32768 2026/07/08 04:50:55 executed programs: 135 [ 327.509568][ T6461] loop0: detected capacity change from 0 to 32768 [ 327.660242][ T6461] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 327.715144][ T6461] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 327.916284][ T6461] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 327.990213][ T804] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 328.017879][ T804] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 328.328922][ T804] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 311ms [ 328.369150][ T804] gfs2: fsid=syz:syz.0: jid=0: Done [ 328.407164][ T6461] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 328.469147][ T6461] gfs2: fsid=syz:syz.0: can't create logd thread: -4 2026/07/08 04:51:02 executed programs: 137 [ 332.084339][ T6479] loop0: detected capacity change from 0 to 32768 [ 332.165698][ T6479] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 332.196092][ T6479] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 332.295327][ T6479] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 332.340655][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 332.364097][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 332.676398][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.679485][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.723460][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 359ms [ 332.754830][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 332.783617][ T6479] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 332.837523][ T6479] gfs2: fsid=syz:syz.0: can't create logd thread: -4 2026/07/08 04:51:07 executed programs: 148 [ 339.890085][ T6521] Bluetooth: hci0: command 0x0406 tx timeout [ 339.892908][ T6521] Bluetooth: hci1: command 0x0406 tx timeout [ 339.896136][ T6521] Bluetooth: hci2: command 0x0406 tx timeout [ 339.899133][ T6521] Bluetooth: hci3: command 0x0406 tx timeout [ 339.913482][ T6521] Bluetooth: hci4: command 0x0406 tx timeout [ 339.919544][ T6521] Bluetooth: hci5: command 0x0406 tx timeout [ 340.785561][ T6522] syz.2.163 invoked oom-killer: gfp_mask=0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), order=0, oom_score_adj=1000 [ 340.934213][ T6522] CPU: 0 UID: 0 PID: 6522 Comm: syz.2.163 Not tainted syzkaller #0 PREEMPT(full) [ 340.934236][ T6522] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 340.934243][ T6522] Call Trace: [ 340.934249][ T6522] [ 340.934254][ T6522] dump_stack_lvl+0xe8/0x150 [ 340.934338][ T6522] dump_header+0xd3/0x4b0 [ 340.934356][ T6522] oom_kill_process+0x3ab/0x970 [ 340.934376][ T6522] out_of_memory+0x1191/0x1480 [ 340.934399][ T6522] ? __pfx_out_of_memory+0x10/0x10 [ 340.934420][ T6522] __alloc_pages_may_oom+0x1ea/0x330 [ 340.934429][ T6522] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 340.934487][ T6522] ? __pfx___alloc_pages_may_oom+0x10/0x10 [ 340.934502][ T6522] __alloc_pages_slowpath+0x6e8/0xcc0 [ 340.934523][ T6522] __alloc_frozen_pages_noprof+0x31f/0x380 [ 340.934537][ T6522] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 340.934551][ T6522] ? __pfx_policy_nodemask+0x10/0x10 [ 340.934572][ T6522] alloc_pages_mpol+0x212/0x380 [ 340.934588][ T6522] folio_alloc_mpol_noprof+0x39/0x160 [ 340.934601][ T6522] shmem_alloc_and_add_folio+0x43e/0xf60 [ 340.934617][ T6522] ? filemap_get_entry+0xcd/0x3f0 [ 340.934637][ T6522] ? __pfx_filemap_get_entry+0x10/0x10 [ 340.934651][ T6522] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 340.934668][ T6522] ? shmem_allowable_huge_orders+0x325/0x6c0 [ 340.934688][ T6522] shmem_get_folio_gfp+0x5da/0x16d0 [ 340.934713][ T6522] shmem_write_begin+0x16c/0x330 [ 340.934728][ T6522] generic_perform_write+0x2d5/0x8f0 [ 340.934740][ T6522] ? __pfx_generic_perform_write+0x10/0x10 [ 340.934748][ T6522] ? preempt_count_add+0x91/0x190 [ 340.934758][ T6522] ? mnt_put_write_access_file+0xb9/0x100 [ 340.934769][ T6522] ? file_update_time_flags+0x400/0x4a0 [ 340.934786][ T6522] shmem_file_write_iter+0xf8/0x120 [ 340.934797][ T6522] vfs_write+0x612/0xba0 [ 340.934811][ T6522] ? __pfx_vfs_write+0x10/0x10 [ 340.934823][ T6522] ? __fget_files+0x2a/0x420 [ 340.934834][ T6522] ksys_write+0x150/0x270 [ 340.934844][ T6522] ? __pfx_ksys_write+0x10/0x10 [ 340.934855][ T6522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.934863][ T6522] do_syscall_64+0x174/0x580 [ 340.934875][ T6522] ? trace_irq_disable+0x3b/0x140 [ 340.934884][ T6522] ? clear_bhb_loop+0x40/0x90 [ 340.934893][ T6522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.934899][ T6522] RIP: 0033:0x7fec5895cfce [ 340.934908][ T6522] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 340.934914][ T6522] RSP: 002b:00007fec59792da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 340.934924][ T6522] RAX: ffffffffffffffda RBX: 00007fec597936c0 RCX: 00007fec5895cfce [ 340.934929][ T6522] RDX: 0000000001000000 RSI: 00007fec4fa00000 RDI: 0000000000000003 [ 340.934933][ T6522] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 340.934937][ T6522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 340.934941][ T6522] R13: 00007fec59792ee0 R14: 00007fec59792ea0 R15: 00007fec4fa00000 [ 340.934957][ T6522] [ 341.086427][ T6522] Mem-Info: [ 341.151674][ T6522] active_anon:30563 inactive_anon:24013 isolated_anon:0 [ 341.151674][ T6522] active_file:257 inactive_file:238 isolated_file:0 [ 341.151674][ T6522] unevictable:1768 dirty:0 writeback:0 [ 341.151674][ T6522] slab_reclaimable:4289 slab_unreclaimable:49321 [ 341.151674][ T6522] mapped:13 shmem:12578 pagetables:1156 [ 341.151674][ T6522] sec_pagetables:294 bounce:0 [ 341.151674][ T6522] kernel_misc_reclaimable:0 [ 341.151674][ T6522] free:14828 free_pcp:71 free_cma:0 [ 341.437877][ T6522] Node 0 active_anon:0kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:1468kB isolated(anon):0kB isolated(file):0kB mapped:16kB dirty:0kB writeback:0kB shmem:1468kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:2656kB pagetables:908kB sec_pagetables:1088kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 341.816083][ T6522] Node 1 active_anon:119192kB inactive_anon:102920kB active_file:104kB inactive_file:452kB unevictable:5604kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:52624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10048kB pagetables:3716kB sec_pagetables:88kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 342.139499][ T6522] Node 0 DMA free:1184kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:756kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 342.410602][ T6522] lowmem_reserve[]: 0 109 109 109 109 [ 342.448494][ T6522] Node 0 DMA32 free:5892kB boost:9292kB min:13424kB low:14456kB high:15488kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:12kB active_file:0kB inactive_file:0kB unevictable:1468kB writepending:0kB zspages:9848kB present:770052kB managed:112088kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 343.040828][ T6522] lowmem_reserve[]: 0 0 0 0 0 [ 343.143931][ T6522] Node 1 DMA32 free:54524kB boost:6144kB min:40448kB low:49024kB high:57600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:98772kB inactive_anon:112988kB active_file:1500kB inactive_file:4600kB unevictable:5604kB writepending:0kB zspages:34968kB present:786288kB managed:690812kB mlocked:0kB bounce:0kB free_pcp:404kB local_pcp:404kB free_cma:0kB [ 343.694227][ T6522] lowmem_reserve[]: 0 0 0 0 0 [ 343.764862][ T6522] Node 0 DMA: 28*4kB (U) 14*8kB (U) 8*16kB (U) 14*32kB (U) 4*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 1184kB [ 343.976479][ T6522] Node 0 DMA32: 5*4kB (U) 58*8kB (UM) 74*16kB (UE) 80*32kB (UE) 12*64kB (U) 5*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 5892kB [ 344.177532][ T6522] Node 1 DMA32: 276*4kB (UM) 766*8kB (UE) 516*16kB (UME) 31*32kB (UME) 199*64kB (UME) 88*128kB (UE) 43*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 51488kB [ 344.496959][ T6522] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 344.660414][ T6522] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 344.865275][ T6522] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.046955][ T6522] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.218165][ T6522] 20054 total pagecache pages [ 345.310742][ T6522] 2023 pages in swap cache [ 345.399065][ T6522] Free swap = 0kB [ 345.489404][ T6522] Total swap = 124996kB [ 345.568650][ T6522] 393083 pages RAM [ 345.654178][ T6522] 0 pages HighMem/MovableOnly [ 345.767718][ T6522] 188518 pages reserved [ 345.839786][ T6522] 0 pages cma reserved [ 345.958578][ T6522] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0-1,global_oom,task_memcg=/syz2,task=syz.2.163,pid=6522,uid=0 [ 346.122122][ T6522] Out of memory (oom_kill_allocating_task): Killed process 6519 (syz.2.163) total-vm:180464kB, anon-rss:10196kB, file-rss:868kB, shmem-rss:0kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 349.580156][ T6542] loop0: detected capacity change from 0 to 32768 [ 349.633205][ T6542] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 349.658803][ T6542] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 349.709623][ T6542] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 349.734876][ T804] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 349.747720][ T804] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 349.899069][ T804] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 151ms [ 349.916464][ T804] gfs2: fsid=syz:syz.0: jid=0: Done [ 349.928395][ T6542] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 350.125846][ T6542] gfs2: fsid=syz:syz.0: found 1 quota changes [ 350.231236][ T5751] syz-executor: attempt to access beyond end of device [ 350.231236][ T5751] loop0: rw=12289, sector=68719479080, nr_sectors = 8 limit=32768 [ 350.251224][ T5751] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 350.263335][ T5751] syz-executor: attempt to access beyond end of device [ 350.263335][ T5751] loop0: rw=12289, sector=68719479336, nr_sectors = 8 limit=32768 [ 350.280350][ T5751] Buffer I/O error on dev loop0, logical block 8589934917, lost async page write [ 350.289043][ T5751] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_start_one, file = fs/gfs2/log.c, line = 116 [ 350.295296][ T5751] CPU: 0 UID: 0 PID: 5751 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 350.295314][ T5751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 350.295320][ T5751] Call Trace: [ 350.295325][ T5751] [ 350.295330][ T5751] dump_stack_lvl+0xe8/0x150 [ 350.295356][ T5751] gfs2_withdraw+0xc3/0x1b0 [ 350.295424][ T5751] gfs2_ail1_flush+0x96a/0xf70 [ 350.295450][ T5751] ? __pfx_gfs2_ail1_flush+0x10/0x10 [ 350.295477][ T5751] empty_ail1_list+0x1b3/0x330 [ 350.295497][ T5751] ? __pfx_empty_ail1_list+0x10/0x10 [ 350.295542][ T5751] ? do_raw_spin_unlock+0x4d/0x210 [ 350.295560][ T5751] __gfs2_log_flush+0x1688/0x1d90 [ 350.295585][ T5751] ? __pfx___gfs2_log_flush+0x10/0x10 [ 350.295600][ T5751] ? down_write+0x16d/0x200 [ 350.295617][ T5751] ? __pfx_down_write+0x10/0x10 [ 350.295636][ T5751] ? call_rcu+0x64b/0x8b0 [ 350.295650][ T5751] gfs2_log_flush+0x34/0x50 [ 350.295666][ T5751] gfs2_kill_sb+0x5c/0x430 [ 350.295686][ T5751] deactivate_locked_super+0xbc/0x130 [ 350.295707][ T5751] cleanup_mnt+0x3d3/0x460 [ 350.295726][ T5751] task_work_run+0x1d9/0x270 [ 350.295747][ T5751] ? __pfx_task_work_run+0x10/0x10 [ 350.295770][ T5751] exit_to_user_mode_loop+0x1fa/0x730 [ 350.295785][ T5751] ? rcu_is_watching+0x15/0xb0 [ 350.295804][ T5751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.295818][ T5751] do_syscall_64+0x353/0x580 [ 350.295833][ T5751] ? trace_irq_disable+0x3b/0x140 [ 350.295870][ T5751] ? clear_bhb_loop+0x40/0x90 [ 350.295885][ T5751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.295897][ T5751] RIP: 0033:0x7f06f059d9d7 [ 350.295910][ T5751] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 350.295919][ T5751] RSP: 002b:00007ffc94fe3718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 350.295933][ T5751] RAX: 0000000000000000 RBX: 00007f06f0631f90 RCX: 00007f06f059d9d7 [ 350.295941][ T5751] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc94fe37d0 [ 350.295949][ T5751] RBP: 00007ffc94fe37d0 R08: 00007ffc94fe47d0 R09: 00000000ffffffff [ 350.295957][ T5751] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc94fe4860 [ 350.295964][ T5751] R13: 00007f06f0631f90 R14: 0000000000055740 R15: 00007ffc94fe48a0 [ 350.295981][ T5751] [ 350.297422][ T5751] gfs2: fsid=syz:syz.0: about to withdraw this file system 2026/07/08 04:51:24 executed programs: 152 [ 355.716033][ T804] gfs2: fsid=syz:syz.0: file system withdrawn [ 359.770573][ T6557] loop0: detected capacity change from 0 to 32768 2026/07/08 04:51:31 executed programs: 158 [ 359.887602][ T6557] workqueue: Failed to create a rescuer kthread for wq "gfs2-delete/syz:syz": -EINTR [ 363.115887][ T6567] loop0: detected capacity change from 0 to 32768 [ 363.225608][ T6567] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 363.266639][ T6567] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 363.376472][ T6567] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 6ms [ 363.450453][ T5975] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 363.481684][ T5975] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 363.728086][ T5975] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 246ms [ 363.777653][ T5975] gfs2: fsid=syz:syz.0: jid=0: Done [ 363.813202][ T6567] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 364.357580][ T6567] gfs2: fsid=syz:syz.0: found 1 quota changes [ 364.603550][ T5751] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 398 [ 364.650512][ T5751] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 364.688027][ T5751] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5751 [syz-executor] gfs2_quota_sync+0x353/0x450 [ 364.721271][ T5751] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 364.764735][ T5751] CPU: 0 UID: 0 PID: 5751 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 364.764754][ T5751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 364.764761][ T5751] Call Trace: [ 364.764766][ T5751] [ 364.764771][ T5751] dump_stack_lvl+0xe8/0x150 [ 364.764795][ T5751] gfs2_withdraw+0xc3/0x1b0 [ 364.764812][ T5751] inode_go_instantiate+0xbc7/0x12c0 [ 364.764827][ T5751] ? preempt_schedule_thunk+0x16/0x40 [ 364.764845][ T5751] ? __pfx_inode_go_instantiate+0x10/0x10 [ 364.764864][ T5751] gfs2_instantiate+0x168/0x220 [ 364.764882][ T5751] gfs2_glock_wait+0x1d4/0x2a0 [ 364.764899][ T5751] do_sync+0x49c/0xbb0 [ 364.764911][ T5751] ? gfs2_quota_sync+0x353/0x450 [ 364.764927][ T5751] ? __pfx_do_sync+0x10/0x10 [ 364.764944][ T5751] ? gfs2_quota_sync+0x353/0x450 [ 364.764957][ T5751] ? do_raw_spin_unlock+0x4d/0x210 [ 364.764973][ T5751] gfs2_quota_sync+0x353/0x450 [ 364.764991][ T5751] gfs2_sync_fs+0x4c/0xb0 [ 364.765003][ T5751] sync_filesystem+0xee/0x230 [ 364.765021][ T5751] generic_shutdown_super+0x77/0x2d0 [ 364.765037][ T5751] kill_block_super+0x44/0x90 [ 364.765052][ T5751] deactivate_locked_super+0xbc/0x130 [ 364.765067][ T5751] cleanup_mnt+0x3d3/0x460 [ 364.765085][ T5751] task_work_run+0x1d9/0x270 [ 364.765103][ T5751] ? __pfx_task_work_run+0x10/0x10 [ 364.765117][ T5751] exit_to_user_mode_loop+0x1fa/0x730 [ 364.765126][ T5751] ? rcu_is_watching+0x15/0xb0 [ 364.765141][ T5751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.765152][ T5751] do_syscall_64+0x353/0x580 [ 364.765235][ T5751] ? trace_irq_disable+0x3b/0x140 [ 364.765254][ T5751] ? clear_bhb_loop+0x40/0x90 [ 364.765272][ T5751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.765286][ T5751] RIP: 0033:0x7f06f059d9d7 [ 364.765302][ T5751] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 364.765313][ T5751] RSP: 002b:00007ffc94fe3718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 364.765330][ T5751] RAX: 0000000000000000 RBX: 00007f06f0631f90 RCX: 00007f06f059d9d7 [ 364.765338][ T5751] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc94fe37d0 [ 364.765345][ T5751] RBP: 00007ffc94fe37d0 R08: 00007ffc94fe47d0 R09: 00000000ffffffff [ 364.765354][ T5751] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc94fe4860 [ 364.765362][ T5751] R13: 00007f06f0631f90 R14: 00000000000581f3 R15: 00007ffc94fe48a0 [ 364.765384][ T5751] [ 364.765390][ T5751] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 368.333167][ T6588] loop0: detected capacity change from 0 to 32768 [ 368.422392][ T6588] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 368.449553][ T6588] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 368.556859][ T6588] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 368.611879][ T5430] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 368.643130][ T5430] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 368.840184][ T5430] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 197ms [ 368.872121][ T5430] gfs2: fsid=syz:syz.0: jid=0: Done 2026/07/08 04:51:39 executed programs: 167 [ 368.893336][ T6588] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 369.239822][ T6588] gfs2: fsid=syz:syz.0: found 1 quota changes [ 369.384844][ T5751] syz-executor: attempt to access beyond end of device [ 369.384844][ T5751] loop0: rw=12289, sector=68719479080, nr_sectors = 8 limit=32768 [ 369.412539][ T5751] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 369.432805][ T5751] syz-executor: attempt to access beyond end of device [ 369.432805][ T5751] loop0: rw=12289, sector=68719479336, nr_sectors = 8 limit=32768 [ 369.476259][ T5751] Buffer I/O error on dev loop0, logical block 8589934917, lost async page write [ 369.498443][ T5751] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_start_one, file = fs/gfs2/log.c, line = 116 [ 369.505074][ T5751] CPU: 0 UID: 0 PID: 5751 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 369.505096][ T5751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 369.505107][ T5751] Call Trace: [ 369.505113][ T5751] [ 369.505119][ T5751] dump_stack_lvl+0xe8/0x150 [ 369.505163][ T5751] gfs2_withdraw+0xc3/0x1b0 [ 369.505194][ T5751] gfs2_ail1_flush+0x96a/0xf70 [ 369.505215][ T5751] ? __bfs+0x153/0x290 [ 369.505250][ T5751] ? __pfx_gfs2_ail1_flush+0x10/0x10 [ 369.505285][ T5751] empty_ail1_list+0x1b3/0x330 [ 369.505310][ T5751] ? __pfx_empty_ail1_list+0x10/0x10 [ 369.505360][ T5751] ? do_raw_spin_unlock+0x4d/0x210 [ 369.505378][ T5751] __gfs2_log_flush+0x1688/0x1d90 [ 369.505400][ T5751] ? __pfx___gfs2_log_flush+0x10/0x10 [ 369.505415][ T5751] ? down_write+0x16d/0x200 [ 369.505442][ T5751] ? __pfx_down_write+0x10/0x10 [ 369.505459][ T5751] ? call_rcu+0x64b/0x8b0 [ 369.505472][ T5751] gfs2_log_flush+0x34/0x50 [ 369.505490][ T5751] gfs2_kill_sb+0x5c/0x430 [ 369.505510][ T5751] deactivate_locked_super+0xbc/0x130 [ 369.505528][ T5751] cleanup_mnt+0x3d3/0x460 [ 369.505546][ T5751] task_work_run+0x1d9/0x270 [ 369.505565][ T5751] ? __pfx_task_work_run+0x10/0x10 [ 369.505589][ T5751] exit_to_user_mode_loop+0x1fa/0x730 [ 369.505603][ T5751] ? rcu_is_watching+0x15/0xb0 [ 369.505649][ T5751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.505663][ T5751] do_syscall_64+0x353/0x580 [ 369.505677][ T5751] ? trace_irq_disable+0x3b/0x140 [ 369.505692][ T5751] ? clear_bhb_loop+0x40/0x90 [ 369.505708][ T5751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.505719][ T5751] RIP: 0033:0x7f06f059d9d7 [ 369.505733][ T5751] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 369.505743][ T5751] RSP: 002b:00007ffc94fe3718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 369.505758][ T5751] RAX: 0000000000000000 RBX: 00007f06f0631f90 RCX: 00007f06f059d9d7 [ 369.505766][ T5751] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc94fe37d0 [ 369.505773][ T5751] RBP: 00007ffc94fe37d0 R08: 00007ffc94fe47d0 R09: 00000000ffffffff [ 369.505781][ T5751] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc94fe4860 [ 369.505788][ T5751] R13: 00007f06f0631f90 R14: 000000000005a210 R15: 00007ffc94fe48a0 [ 369.505805][ T5751] [ 369.505867][ T5751] gfs2: fsid=syz:syz.0: about to withdraw this file system 2026/07/08 04:51:44 executed programs: 174 [ 374.916874][ T5430] gfs2: fsid=syz:syz.0: file system withdrawn [ 377.663891][ T6617] loop0: detected capacity change from 0 to 32768 [ 377.752285][ T6617] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 377.782002][ T6617] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 377.858605][ T6617] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 377.913220][ T1248] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 377.930656][ T1248] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 378.531060][ T1248] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 600ms [ 378.558151][ T1248] gfs2: fsid=syz:syz.0: jid=0: Done [ 378.587978][ T6617] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 379.106644][ T6617] gfs2: fsid=syz:syz.0: found 1 quota changes [ 379.649458][ T5751] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 398 [ 379.686210][ T5751] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 379.714361][ T5751] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5751 [syz-executor] gfs2_quota_sync+0x353/0x450 [ 379.752630][ T5751] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 379.781700][ T5751] CPU: 0 UID: 0 PID: 5751 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 379.781720][ T5751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 379.781728][ T5751] Call Trace: [ 379.781733][ T5751] [ 379.781739][ T5751] dump_stack_lvl+0xe8/0x150 [ 379.781764][ T5751] gfs2_withdraw+0xc3/0x1b0 [ 379.781782][ T5751] inode_go_instantiate+0xbc7/0x12c0 [ 379.781806][ T5751] ? __pfx_inode_go_instantiate+0x10/0x10 [ 379.781819][ T5751] ? do_raw_spin_unlock+0x4d/0x210 [ 379.781835][ T5751] ? __pfx_wake_bit_function+0x10/0x10 [ 379.781852][ T5751] gfs2_instantiate+0x168/0x220 [ 379.781870][ T5751] gfs2_glock_wait+0x1d4/0x2a0 [ 379.781891][ T5751] do_sync+0x49c/0xbb0 [ 379.781903][ T5751] ? gfs2_quota_sync+0x353/0x450 [ 379.781920][ T5751] ? __pfx_do_sync+0x10/0x10 [ 379.781938][ T5751] ? gfs2_quota_sync+0x353/0x450 [ 379.781953][ T5751] ? do_raw_spin_unlock+0x4d/0x210 [ 379.781968][ T5751] gfs2_quota_sync+0x353/0x450 [ 379.781987][ T5751] gfs2_sync_fs+0x4c/0xb0 [ 379.782001][ T5751] sync_filesystem+0xee/0x230 [ 379.782020][ T5751] generic_shutdown_super+0x77/0x2d0 [ 379.782061][ T5751] kill_block_super+0x44/0x90 [ 379.782077][ T5751] deactivate_locked_super+0xbc/0x130 [ 379.782093][ T5751] cleanup_mnt+0x3d3/0x460 [ 379.782112][ T5751] task_work_run+0x1d9/0x270 [ 379.782133][ T5751] ? __pfx_task_work_run+0x10/0x10 [ 379.782156][ T5751] exit_to_user_mode_loop+0x1fa/0x730 [ 379.782171][ T5751] ? rcu_is_watching+0x15/0xb0 [ 379.782190][ T5751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.782203][ T5751] do_syscall_64+0x353/0x580 [ 379.782230][ T5751] ? trace_irq_disable+0x3b/0x140 [ 379.782245][ T5751] ? clear_bhb_loop+0x40/0x90 [ 379.782260][ T5751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.782273][ T5751] RIP: 0033:0x7f06f059d9d7 [ 379.782285][ T5751] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 379.782294][ T5751] RSP: 002b:00007ffc94fe3718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 379.782308][ T5751] RAX: 0000000000000000 RBX: 00007f06f0631f90 RCX: 00007f06f059d9d7 [ 379.782316][ T5751] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc94fe37d0 [ 379.782322][ T5751] RBP: 00007ffc94fe37d0 R08: 00007ffc94fe47d0 R09: 00000000ffffffff [ 379.782330][ T5751] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc94fe4860 [ 379.782336][ T5751] R13: 00007f06f0631f90 R14: 000000000005bd04 R15: 00007ffc94fe48a0 [ 379.782355][ T5751] [ 379.784911][ T5751] gfs2: fsid=syz:syz.0: about to withdraw this file system 2026/07/08 04:51:51 executed programs: 176 [ 382.872115][ T6628] loop0: detected capacity change from 0 to 32768 [ 382.918988][ T6628] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 382.959466][ T6628] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 383.047953][ T6628] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 383.093798][ T1248] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 383.120630][ T1248] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 383.409678][ T1248] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 289ms [ 383.439031][ T1248] gfs2: fsid=syz:syz.0: jid=0: Done [ 383.474283][ T6628] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 383.898122][ T6628] gfs2: fsid=syz:syz.0: found 1 quota changes [ 383.988023][ T5751] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 398 [ 384.036808][ T5751] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 384.062409][ T5751] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5751 [syz-executor] gfs2_quota_sync+0x353/0x450 [ 384.086206][ T5751] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 384.102246][ T5751] CPU: 0 UID: 0 PID: 5751 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 384.102265][ T5751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 384.102272][ T5751] Call Trace: [ 384.102277][ T5751] [ 384.102282][ T5751] dump_stack_lvl+0xe8/0x150 [ 384.102304][ T5751] gfs2_withdraw+0xc3/0x1b0 [ 384.102318][ T5751] inode_go_instantiate+0xbc7/0x12c0 [ 384.102327][ T5751] ? preempt_schedule_thunk+0x16/0x40 [ 384.102341][ T5751] ? __pfx_inode_go_instantiate+0x10/0x10 [ 384.102360][ T5751] gfs2_instantiate+0x168/0x220 [ 384.102376][ T5751] gfs2_glock_wait+0x1d4/0x2a0 [ 384.102397][ T5751] do_sync+0x49c/0xbb0 [ 384.102408][ T5751] ? gfs2_quota_sync+0x353/0x450 [ 384.102424][ T5751] ? __pfx_do_sync+0x10/0x10 [ 384.102441][ T5751] ? gfs2_quota_sync+0x353/0x450 [ 384.102455][ T5751] ? do_raw_spin_unlock+0x4d/0x210 [ 384.102470][ T5751] gfs2_quota_sync+0x353/0x450 [ 384.102481][ T5751] gfs2_sync_fs+0x4c/0xb0 [ 384.102489][ T5751] sync_filesystem+0xee/0x230 [ 384.102500][ T5751] generic_shutdown_super+0x77/0x2d0 [ 384.102510][ T5751] kill_block_super+0x44/0x90 [ 384.102519][ T5751] deactivate_locked_super+0xbc/0x130 [ 384.102532][ T5751] cleanup_mnt+0x3d3/0x460 [ 384.102547][ T5751] task_work_run+0x1d9/0x270 [ 384.102590][ T5751] ? __pfx_task_work_run+0x10/0x10 [ 384.102611][ T5751] exit_to_user_mode_loop+0x1fa/0x730 [ 384.102625][ T5751] ? rcu_is_watching+0x15/0xb0 [ 384.102642][ T5751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.102654][ T5751] do_syscall_64+0x353/0x580 [ 384.102666][ T5751] ? trace_irq_disable+0x3b/0x140 [ 384.102680][ T5751] ? clear_bhb_loop+0x40/0x90 [ 384.102693][ T5751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.102702][ T5751] RIP: 0033:0x7f06f059d9d7 [ 384.102714][ T5751] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 384.102723][ T5751] RSP: 002b:00007ffc94fe3718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 384.102735][ T5751] RAX: 0000000000000000 RBX: 00007f06f0631f90 RCX: 00007f06f059d9d7 [ 384.102743][ T5751] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc94fe37d0 [ 384.102749][ T5751] RBP: 00007ffc94fe37d0 R08: 00007ffc94fe47d0 R09: 00000000ffffffff [ 384.102756][ T5751] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc94fe4860 [ 384.102762][ T5751] R13: 00007f06f0631f90 R14: 000000000005ce9e R15: 00007ffc94fe48a0 [ 384.102780][ T5751] [ 384.105166][ T5751] gfs2: fsid=syz:syz.0: about to withdraw this file system 2026/07/08 04:51:56 executed programs: 183 2026/07/08 04:52:01 executed programs: 190 [ 394.116821][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 394.132412][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 398.540292][ T6670] loop0: detected capacity change from 0 to 32768 2026/07/08 04:52:10 executed programs: 196 [ 398.677258][ T6670] workqueue: Failed to create a rescuer kthread for wq "gfs2-glock/syz:syz": -EINTR [ 402.872229][ T6686] loop0: detected capacity change from 0 to 32768 [ 403.074446][ T6686] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 403.131111][ T6686] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 403.385512][ T6686] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 403.652046][ T5975] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 403.684038][ T5975] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 404.063081][ T5975] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 379ms [ 404.092449][ T5975] gfs2: fsid=syz:syz.0: jid=0: Done [ 404.114159][ T6686] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 404.166434][ T6686] gfs2: fsid=syz:syz.0: can't create logd thread: -4 2026/07/08 04:52:16 executed programs: 202 [ 406.341129][ T6702] loop0: detected capacity change from 0 to 32768 [ 406.433717][ T6702] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 406.465124][ T6702] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 406.516400][ T6702] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 406.545680][ T1248] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 406.563851][ T1248] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 406.788090][ T1248] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 224ms [ 406.815760][ T1248] gfs2: fsid=syz:syz.0: jid=0: Done [ 406.836423][ T6702] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 407.414547][ T6702] gfs2: fsid=syz:syz.0: found 1 quota changes [ 407.606629][ T5751] syz-executor: attempt to access beyond end of device [ 407.606629][ T5751] loop0: rw=12289, sector=68719479080, nr_sectors = 8 limit=32768 [ 407.664301][ T5751] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 407.688108][ T5751] syz-executor: attempt to access beyond end of device [ 407.688108][ T5751] loop0: rw=12289, sector=68719479336, nr_sectors = 8 limit=32768 [ 407.726435][ T5751] Buffer I/O error on dev loop0, logical block 8589934917, lost async page write [ 407.757323][ T5751] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_start_one, file = fs/gfs2/log.c, line = 116 [ 407.763831][ T5751] CPU: 0 UID: 0 PID: 5751 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 407.763850][ T5751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 407.763857][ T5751] Call Trace: [ 407.763871][ T5751] [ 407.763876][ T5751] dump_stack_lvl+0xe8/0x150 [ 407.763949][ T5751] gfs2_withdraw+0xc3/0x1b0 [ 407.763997][ T5751] gfs2_ail1_flush+0x96a/0xf70 [ 407.764012][ T5751] ? rcu_is_watching+0x15/0xb0 [ 407.764036][ T5751] ? __pfx_gfs2_ail1_flush+0x10/0x10 [ 407.764060][ T5751] empty_ail1_list+0x1b3/0x330 [ 407.764077][ T5751] ? __pfx_empty_ail1_list+0x10/0x10 [ 407.764116][ T5751] ? do_raw_spin_unlock+0x4d/0x210 [ 407.764131][ T5751] __gfs2_log_flush+0x1688/0x1d90 [ 407.764152][ T5751] ? __pfx___gfs2_log_flush+0x10/0x10 [ 407.764166][ T5751] ? down_write+0x16d/0x200 [ 407.764212][ T5751] ? __pfx_down_write+0x10/0x10 [ 407.764228][ T5751] ? call_rcu+0x64b/0x8b0 [ 407.764239][ T5751] gfs2_log_flush+0x34/0x50 [ 407.764255][ T5751] gfs2_kill_sb+0x5c/0x430 [ 407.764273][ T5751] deactivate_locked_super+0xbc/0x130 [ 407.764288][ T5751] cleanup_mnt+0x3d3/0x460 [ 407.764304][ T5751] task_work_run+0x1d9/0x270 [ 407.764323][ T5751] ? __pfx_task_work_run+0x10/0x10 [ 407.764343][ T5751] exit_to_user_mode_loop+0x1fa/0x730 [ 407.764358][ T5751] ? rcu_is_watching+0x15/0xb0 [ 407.764391][ T5751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.764405][ T5751] do_syscall_64+0x353/0x580 [ 407.764418][ T5751] ? trace_irq_disable+0x3b/0x140 [ 407.764433][ T5751] ? clear_bhb_loop+0x40/0x90 [ 407.764445][ T5751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.764455][ T5751] RIP: 0033:0x7f06f059d9d7 [ 407.764469][ T5751] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 407.764477][ T5751] RSP: 002b:00007ffc94fe3718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 407.764495][ T5751] RAX: 0000000000000000 RBX: 00007f06f0631f90 RCX: 00007f06f059d9d7 [ 407.764502][ T5751] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc94fe37d0 [ 407.764509][ T5751] RBP: 00007ffc94fe37d0 R08: 00007ffc94fe47d0 R09: 00000000ffffffff [ 407.764515][ T5751] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc94fe4860 [ 407.764524][ T5751] R13: 00007f06f0631f90 R14: 0000000000063757 R15: 00007ffc94fe48a0 [ 407.764539][ T5751] [ 407.764592][ T5751] gfs2: fsid=syz:syz.0: about to withdraw this file system 2026/07/08 04:52:22 executed programs: 210 [ 413.474008][ T5430] gfs2: fsid=syz:syz.0: file system withdrawn [ 416.297875][ T6737] loop0: detected capacity change from 0 to 32768 [ 416.399155][ T6737] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 416.425242][ T6737] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... 2026/07/08 04:52:27 executed programs: 216 [ 416.505288][ T6737] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 416.554232][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 416.576885][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 416.895425][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 318ms [ 416.932139][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 416.955548][ T6737] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 417.526273][ T6737] gfs2: fsid=syz:syz.0: found 1 quota changes [ 417.687570][ T5751] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 398 [ 417.747533][ T5751] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 417.781477][ T5751] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5751 [syz-executor] gfs2_quota_sync+0x353/0x450 [ 417.822711][ T5751] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 417.852629][ T5751] CPU: 0 UID: 0 PID: 5751 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 417.852650][ T5751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 417.852657][ T5751] Call Trace: [ 417.852663][ T5751] [ 417.852668][ T5751] dump_stack_lvl+0xe8/0x150 [ 417.852691][ T5751] gfs2_withdraw+0xc3/0x1b0 [ 417.852708][ T5751] inode_go_instantiate+0xbc7/0x12c0 [ 417.852723][ T5751] ? preempt_schedule_thunk+0x16/0x40 [ 417.852739][ T5751] ? __pfx_inode_go_instantiate+0x10/0x10 [ 417.852760][ T5751] gfs2_instantiate+0x168/0x220 [ 417.852777][ T5751] gfs2_glock_wait+0x1d4/0x2a0 [ 417.852794][ T5751] do_sync+0x49c/0xbb0 [ 417.852805][ T5751] ? gfs2_quota_sync+0x353/0x450 [ 417.852821][ T5751] ? __pfx_do_sync+0x10/0x10 [ 417.852837][ T5751] ? gfs2_quota_sync+0x353/0x450 [ 417.852851][ T5751] ? do_raw_spin_unlock+0x4d/0x210 [ 417.852866][ T5751] gfs2_quota_sync+0x353/0x450 [ 417.852882][ T5751] gfs2_sync_fs+0x4c/0xb0 [ 417.852895][ T5751] sync_filesystem+0xee/0x230 [ 417.852913][ T5751] generic_shutdown_super+0x77/0x2d0 [ 417.852929][ T5751] kill_block_super+0x44/0x90 [ 417.852944][ T5751] deactivate_locked_super+0xbc/0x130 [ 417.852958][ T5751] cleanup_mnt+0x3d3/0x460 [ 417.852973][ T5751] task_work_run+0x1d9/0x270 [ 417.852991][ T5751] ? __pfx_task_work_run+0x10/0x10 [ 417.853012][ T5751] exit_to_user_mode_loop+0x1fa/0x730 [ 417.853026][ T5751] ? rcu_is_watching+0x15/0xb0 [ 417.853044][ T5751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.853055][ T5751] do_syscall_64+0x353/0x580 [ 417.853082][ T5751] ? trace_irq_disable+0x3b/0x140 [ 417.853102][ T5751] ? clear_bhb_loop+0x40/0x90 [ 417.853116][ T5751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.853127][ T5751] RIP: 0033:0x7f06f059d9d7 [ 417.853139][ T5751] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 417.853147][ T5751] RSP: 002b:00007ffc94fe3718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 417.853160][ T5751] RAX: 0000000000000000 RBX: 00007f06f0631f90 RCX: 00007f06f059d9d7 [ 417.853167][ T5751] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc94fe37d0 [ 417.853173][ T5751] RBP: 00007ffc94fe37d0 R08: 00007ffc94fe47d0 R09: 00000000ffffffff [ 417.853180][ T5751] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc94fe4860 [ 417.853186][ T5751] R13: 00007f06f0631f90 R14: 00000000000651b9 R15: 00007ffc94fe48a0 [ 417.853202][ T5751] [ 417.853208][ T5751] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 420.800876][ T6754] loop0: detected capacity change from 0 to 32768 [ 420.882318][ T6754] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 420.924495][ T6754] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 421.003800][ T6754] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 421.041146][ T5431] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 421.067242][ T5431] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 422.292824][ T5431] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1225ms [ 422.310611][ T5431] gfs2: fsid=syz:syz.0: jid=0: Done [ 422.319429][ T6754] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 422.356859][ T6754] gfs2: fsid=syz:syz.0: can't create logd thread: -4 2026/07/08 04:52:34 executed programs: 224 [ 425.671552][ T6770] loop0: detected capacity change from 0 to 32768 [ 425.748319][ T6770] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 425.797890][ T6770] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 426.833199][ T6770] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 426.896963][ T5431] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 426.941508][ T5431] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 427.597184][ T5431] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 655ms [ 427.664753][ T5431] gfs2: fsid=syz:syz.0: jid=0: Done [ 427.695973][ T6770] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 427.771446][ T6770] gfs2: fsid=syz:syz.0: can't create logd thread: -4 2026/07/08 04:52:40 executed programs: 230 [ 431.939280][ T6786] loop0: detected capacity change from 0 to 32768 [ 432.067762][ T6786] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 432.108939][ T6786] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 432.576311][ T6786] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 432.629734][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 432.653845][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 433.750549][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1096ms [ 433.778498][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 433.807603][ T6786] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 433.869068][ T6786] gfs2: fsid=syz:syz.0: can't create logd thread: -4 2026/07/08 04:52:46 executed programs: 236 [ 437.963191][ T6799] loop0: detected capacity change from 0 to 32768 [ 438.094193][ T6799] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 438.135810][ T6799] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 438.229489][ T6799] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 438.274409][ T5431] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 438.295374][ T5431] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 438.552088][ T5431] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 256ms [ 438.588919][ T5431] gfs2: fsid=syz:syz.0: jid=0: Done [ 438.613042][ T6799] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 438.668529][ T6799] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 442.099499][ T6812] loop0: detected capacity change from 0 to 32768 [ 442.181779][ T6812] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 442.221961][ T6812] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 442.297059][ T6812] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms 2026/07/08 04:52:51 executed programs: 242 [ 442.365751][ T5431] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 442.391093][ T5431] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 442.938019][ T5431] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 546ms [ 442.973088][ T5431] gfs2: fsid=syz:syz.0: jid=0: Done [ 443.002022][ T6812] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 443.065324][ T6812] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 445.708218][ T6825] loop0: detected capacity change from 0 to 32768 [ 445.780455][ T6825] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 445.818267][ T6825] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 445.882267][ T6825] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 445.912770][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 445.944668][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 446.123465][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 178ms [ 446.159250][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 446.179039][ T6825] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 447.404387][ T6825] gfs2: fsid=syz:syz.0: found 1 quota changes [ 447.552190][ T5751] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 398 [ 447.599416][ T5751] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 447.627240][ T5751] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5751 [syz-executor] gfs2_quota_sync+0x353/0x450 [ 447.658556][ T5751] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 447.687225][ T5751] CPU: 0 UID: 0 PID: 5751 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 447.687249][ T5751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 447.687257][ T5751] Call Trace: [ 447.687264][ T5751] [ 447.687270][ T5751] dump_stack_lvl+0xe8/0x150 [ 447.687298][ T5751] gfs2_withdraw+0xc3/0x1b0 [ 447.687317][ T5751] inode_go_instantiate+0xbc7/0x12c0 [ 447.687333][ T5751] ? preempt_schedule_thunk+0x16/0x40 [ 447.687354][ T5751] ? __pfx_inode_go_instantiate+0x10/0x10 [ 447.687378][ T5751] gfs2_instantiate+0x168/0x220 [ 447.687399][ T5751] gfs2_glock_wait+0x1d4/0x2a0 [ 447.687418][ T5751] do_sync+0x49c/0xbb0 [ 447.687430][ T5751] ? gfs2_quota_sync+0x353/0x450 [ 447.687493][ T5751] ? __pfx_do_sync+0x10/0x10 [ 447.687513][ T5751] ? gfs2_quota_sync+0x353/0x450 [ 447.687528][ T5751] ? do_raw_spin_unlock+0x4d/0x210 [ 447.687545][ T5751] gfs2_quota_sync+0x353/0x450 [ 447.687564][ T5751] gfs2_sync_fs+0x4c/0xb0 [ 447.687576][ T5751] sync_filesystem+0xee/0x230 [ 447.687593][ T5751] generic_shutdown_super+0x77/0x2d0 [ 447.687610][ T5751] kill_block_super+0x44/0x90 [ 447.687626][ T5751] deactivate_locked_super+0xbc/0x130 [ 447.687641][ T5751] cleanup_mnt+0x3d3/0x460 [ 447.687658][ T5751] task_work_run+0x1d9/0x270 [ 447.687676][ T5751] ? __pfx_task_work_run+0x10/0x10 [ 447.687698][ T5751] exit_to_user_mode_loop+0x1fa/0x730 [ 447.687715][ T5751] ? rcu_is_watching+0x15/0xb0 [ 447.687734][ T5751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.687748][ T5751] do_syscall_64+0x353/0x580 [ 447.687825][ T5751] ? trace_irq_disable+0x3b/0x140 [ 447.687841][ T5751] ? clear_bhb_loop+0x40/0x90 [ 447.687855][ T5751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.687866][ T5751] RIP: 0033:0x7f06f059d9d7 [ 447.687880][ T5751] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 447.687889][ T5751] RSP: 002b:00007ffc94fe3718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 447.687903][ T5751] RAX: 0000000000000000 RBX: 00007f06f0631f90 RCX: 00007f06f059d9d7 [ 447.687911][ T5751] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc94fe37d0 [ 447.687918][ T5751] RBP: 00007ffc94fe37d0 R08: 00007ffc94fe47d0 R09: 00000000ffffffff [ 447.687926][ T5751] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc94fe4860 [ 447.687933][ T5751] R13: 00007f06f0631f90 R14: 000000000006c6e0 R15: 00007ffc94fe48a0 [ 447.687951][ T5751] [ 447.810724][ T5751] gfs2: fsid=syz:syz.0: about to withdraw this file system 2026/07/08 04:52:58 executed programs: 248 [ 450.343282][ T6838] loop0: detected capacity change from 0 to 32768 [ 450.376566][ T6838] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 450.396840][ T6838] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 450.443903][ T6838] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 450.475021][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 450.489418][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 450.657752][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 168ms [ 450.682230][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 450.705683][ T6838] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 451.445994][ T6838] gfs2: fsid=syz:syz.0: found 1 quota changes [ 451.526769][ T5751] syz-executor: attempt to access beyond end of device [ 451.526769][ T5751] loop0: rw=12289, sector=68719479080, nr_sectors = 8 limit=32768 [ 451.551283][ T5751] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 451.566273][ T5751] syz-executor: attempt to access beyond end of device [ 451.566273][ T5751] loop0: rw=12289, sector=68719479336, nr_sectors = 8 limit=32768 [ 451.589767][ T5751] Buffer I/O error on dev loop0, logical block 8589934917, lost async page write [ 451.607222][ T5751] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_start_one, file = fs/gfs2/log.c, line = 116 [ 451.613785][ T5751] CPU: 0 UID: 0 PID: 5751 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 451.613806][ T5751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 451.613814][ T5751] Call Trace: [ 451.613823][ T5751] [ 451.613831][ T5751] dump_stack_lvl+0xe8/0x150 [ 451.613858][ T5751] gfs2_withdraw+0xc3/0x1b0 [ 451.613877][ T5751] gfs2_ail1_flush+0x96a/0xf70 [ 451.613895][ T5751] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 451.613923][ T5751] ? __pfx_gfs2_ail1_flush+0x10/0x10 [ 451.613951][ T5751] empty_ail1_list+0x1b3/0x330 [ 451.613974][ T5751] ? __pfx_empty_ail1_list+0x10/0x10 [ 451.614020][ T5751] ? do_raw_spin_unlock+0x4d/0x210 [ 451.614038][ T5751] __gfs2_log_flush+0x1688/0x1d90 [ 451.614064][ T5751] ? __pfx___gfs2_log_flush+0x10/0x10 [ 451.614080][ T5751] ? down_write+0x16d/0x200 [ 451.614097][ T5751] ? __pfx_down_write+0x10/0x10 [ 451.614116][ T5751] ? call_rcu+0x64b/0x8b0 [ 451.614130][ T5751] gfs2_log_flush+0x34/0x50 [ 451.614147][ T5751] gfs2_kill_sb+0x5c/0x430 [ 451.614167][ T5751] deactivate_locked_super+0xbc/0x130 [ 451.614185][ T5751] cleanup_mnt+0x3d3/0x460 [ 451.614206][ T5751] task_work_run+0x1d9/0x270 [ 451.614230][ T5751] ? __pfx_task_work_run+0x10/0x10 [ 451.614250][ T5751] exit_to_user_mode_loop+0x1fa/0x730 [ 451.614262][ T5751] ? rcu_is_watching+0x15/0xb0 [ 451.614275][ T5751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.614287][ T5751] do_syscall_64+0x353/0x580 [ 451.614302][ T5751] ? trace_irq_disable+0x3b/0x140 [ 451.614318][ T5751] ? clear_bhb_loop+0x40/0x90 [ 451.614342][ T5751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.614355][ T5751] RIP: 0033:0x7f06f059d9d7 [ 451.614369][ T5751] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 451.614379][ T5751] RSP: 002b:00007ffc94fe3718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 451.614393][ T5751] RAX: 0000000000000000 RBX: 00007f06f0631f90 RCX: 00007f06f059d9d7 [ 451.614403][ T5751] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc94fe37d0 [ 451.614410][ T5751] RBP: 00007ffc94fe37d0 R08: 00007ffc94fe47d0 R09: 00000000ffffffff [ 451.614418][ T5751] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc94fe4860 [ 451.614426][ T5751] R13: 00007f06f0631f90 R14: 000000000006e2fe R15: 00007ffc94fe48a0 [ 451.614469][ T5751] [ 451.614527][ T5751] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 455.559433][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 455.565385][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 457.074054][ T1248] gfs2: fsid=syz:syz.0: file system withdrawn 2026/07/08 04:53:07 executed programs: 257 2026/07/08 04:53:13 executed programs: 262 [ 463.631728][ T6875] loop0: detected capacity change from 0 to 32768 [ 463.747326][ T6875] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 463.771554][ T6875] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 463.833551][ T6875] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 463.862728][ T1248] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 463.882038][ T1248] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 464.479719][ T1248] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 597ms [ 464.503406][ T1248] gfs2: fsid=syz:syz.0: jid=0: Done [ 464.530891][ T6875] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 465.239431][ T6875] gfs2: fsid=syz:syz.0: found 1 quota changes [ 465.417038][ T5751] syz-executor: attempt to access beyond end of device [ 465.417038][ T5751] loop0: rw=12289, sector=68719479080, nr_sectors = 8 limit=32768 [ 465.456343][ T5751] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 465.481903][ T5751] syz-executor: attempt to access beyond end of device [ 465.481903][ T5751] loop0: rw=12289, sector=68719479336, nr_sectors = 8 limit=32768 [ 465.532946][ T5751] Buffer I/O error on dev loop0, logical block 8589934917, lost async page write [ 465.558987][ T5751] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_start_one, file = fs/gfs2/log.c, line = 116 [ 465.566098][ T5751] CPU: 0 UID: 0 PID: 5751 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 465.566117][ T5751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 465.566123][ T5751] Call Trace: [ 465.566128][ T5751] [ 465.566133][ T5751] dump_stack_lvl+0xe8/0x150 [ 465.566167][ T5751] gfs2_withdraw+0xc3/0x1b0 [ 465.566192][ T5751] gfs2_ail1_flush+0x96a/0xf70 [ 465.566208][ T5751] ? rcu_is_watching+0x15/0xb0 [ 465.566231][ T5751] ? __pfx_gfs2_ail1_flush+0x10/0x10 [ 465.566254][ T5751] empty_ail1_list+0x1b3/0x330 [ 465.566273][ T5751] ? __pfx_empty_ail1_list+0x10/0x10 [ 465.566311][ T5751] ? do_raw_spin_unlock+0x4d/0x210 [ 465.566327][ T5751] __gfs2_log_flush+0x1688/0x1d90 [ 465.566350][ T5751] ? __pfx___gfs2_log_flush+0x10/0x10 [ 465.566362][ T5751] ? down_write+0x16d/0x200 [ 465.566383][ T5751] ? __pfx_down_write+0x10/0x10 [ 465.566399][ T5751] ? call_rcu+0x64b/0x8b0 [ 465.566411][ T5751] gfs2_log_flush+0x34/0x50 [ 465.566426][ T5751] gfs2_kill_sb+0x5c/0x430 [ 465.566445][ T5751] deactivate_locked_super+0xbc/0x130 [ 465.566461][ T5751] cleanup_mnt+0x3d3/0x460 [ 465.566475][ T5751] task_work_run+0x1d9/0x270 [ 465.566488][ T5751] ? __pfx_task_work_run+0x10/0x10 [ 465.566501][ T5751] exit_to_user_mode_loop+0x1fa/0x730 [ 465.566511][ T5751] ? rcu_is_watching+0x15/0xb0 [ 465.566521][ T5751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.566539][ T5751] do_syscall_64+0x353/0x580 [ 465.566553][ T5751] ? trace_irq_disable+0x3b/0x140 [ 465.566590][ T5751] ? clear_bhb_loop+0x40/0x90 [ 465.566605][ T5751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.566615][ T5751] RIP: 0033:0x7f06f059d9d7 [ 465.566628][ T5751] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 465.566636][ T5751] RSP: 002b:00007ffc94fe3718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 465.566650][ T5751] RAX: 0000000000000000 RBX: 00007f06f0631f90 RCX: 00007f06f059d9d7 [ 465.566657][ T5751] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc94fe37d0 [ 465.566663][ T5751] RBP: 00007ffc94fe37d0 R08: 00007ffc94fe47d0 R09: 00000000ffffffff [ 465.566670][ T5751] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc94fe4860 [ 465.566676][ T5751] R13: 00007f06f0631f90 R14: 0000000000071928 R15: 00007ffc94fe48a0 [ 465.566694][ T5751] [ 465.566748][ T5751] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 471.393367][ T1248] gfs2: fsid=syz:syz.0: file system withdrawn 2026/07/08 04:53:23 executed programs: 270 [ 473.053415][ T6903] loop0: detected capacity change from 0 to 32768 [ 473.111443][ T6903] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 473.139611][ T6903] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 473.195838][ T6903] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 473.225539][ T1248] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 473.252288][ T1248] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 473.717566][ T1248] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 465ms [ 473.749530][ T1248] gfs2: fsid=syz:syz.0: jid=0: Done [ 473.777162][ T6903] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 474.519174][ T6903] gfs2: fsid=syz:syz.0: found 1 quota changes [ 475.963884][ T5751] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 398 [ 476.016363][ T5751] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 476.063533][ T5751] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5751 [syz-executor] gfs2_quota_sync+0x353/0x450 [ 476.101278][ T5751] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 476.130873][ T5751] CPU: 0 UID: 0 PID: 5751 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 476.130895][ T5751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 476.130902][ T5751] Call Trace: [ 476.130918][ T5751] [ 476.130924][ T5751] dump_stack_lvl+0xe8/0x150 [ 476.130947][ T5751] gfs2_withdraw+0xc3/0x1b0 [ 476.130965][ T5751] inode_go_instantiate+0xbc7/0x12c0 [ 476.130981][ T5751] ? preempt_schedule_thunk+0x16/0x40 [ 476.131000][ T5751] ? __pfx_inode_go_instantiate+0x10/0x10 [ 476.131017][ T5751] gfs2_instantiate+0x168/0x220 [ 476.131029][ T5751] gfs2_glock_wait+0x1d4/0x2a0 [ 476.131040][ T5751] do_sync+0x49c/0xbb0 [ 476.131048][ T5751] ? gfs2_quota_sync+0x353/0x450 [ 476.131059][ T5751] ? __pfx_do_sync+0x10/0x10 [ 476.131073][ T5751] ? gfs2_quota_sync+0x353/0x450 [ 476.131082][ T5751] ? do_raw_spin_unlock+0x4d/0x210 [ 476.131092][ T5751] gfs2_quota_sync+0x353/0x450 [ 476.131109][ T5751] gfs2_sync_fs+0x4c/0xb0 [ 476.131120][ T5751] sync_filesystem+0xee/0x230 [ 476.131138][ T5751] generic_shutdown_super+0x77/0x2d0 [ 476.131156][ T5751] kill_block_super+0x44/0x90 [ 476.131192][ T5751] deactivate_locked_super+0xbc/0x130 [ 476.131208][ T5751] cleanup_mnt+0x3d3/0x460 [ 476.131226][ T5751] task_work_run+0x1d9/0x270 [ 476.131280][ T5751] ? __pfx_task_work_run+0x10/0x10 [ 476.131304][ T5751] exit_to_user_mode_loop+0x1fa/0x730 [ 476.131319][ T5751] ? rcu_is_watching+0x15/0xb0 [ 476.131337][ T5751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.131347][ T5751] do_syscall_64+0x353/0x580 [ 476.131364][ T5751] ? trace_irq_disable+0x3b/0x140 [ 476.131378][ T5751] ? clear_bhb_loop+0x40/0x90 [ 476.131390][ T5751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.131400][ T5751] RIP: 0033:0x7f06f059d9d7 [ 476.131412][ T5751] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 476.131420][ T5751] RSP: 002b:00007ffc94fe3718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 476.131433][ T5751] RAX: 0000000000000000 RBX: 00007f06f0631f90 RCX: 00007f06f059d9d7 [ 476.131440][ T5751] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc94fe37d0 [ 476.131446][ T5751] RBP: 00007ffc94fe37d0 R08: 00007ffc94fe47d0 R09: 00000000ffffffff [ 476.131453][ T5751] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc94fe4860 [ 476.131460][ T5751] R13: 00007f06f0631f90 R14: 000000000007325e R15: 00007ffc94fe48a0 [ 476.131478][ T5751] [ 476.257254][ T5751] gfs2: fsid=syz:syz.0: about to withdraw this file system 2026/07/08 04:53:29 executed programs: 273 [ 484.239470][ T6920] loop0: detected capacity change from 0 to 32768 [ 484.326997][ T6920] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 484.370253][ T6920] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 484.435771][ T6920] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 484.461687][ T5975] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 484.481550][ T5975] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 484.620615][ T5975] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 139ms [ 484.638979][ T5975] gfs2: fsid=syz:syz.0: jid=0: Done [ 484.659303][ T6920] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 484.939577][ T6920] gfs2: fsid=syz:syz.0: found 1 quota changes [ 485.008501][ T5751] syz-executor: attempt to access beyond end of device [ 485.008501][ T5751] loop0: rw=12289, sector=68719479080, nr_sectors = 8 limit=32768 [ 485.032452][ T5751] Buffer I/O error on dev loop0, logical block 8589934885, lost async page write [ 485.050142][ T5751] syz-executor: attempt to access beyond end of device [ 485.050142][ T5751] loop0: rw=12289, sector=68719479336, nr_sectors = 8 limit=32768 [ 485.080121][ T5751] Buffer I/O error on dev loop0, logical block 8589934917, lost async page write [ 485.084601][ T5751] gfs2: fsid=syz:syz.0: fatal: I/O error - block = 8589934885, function = gfs2_ail1_start_one, file = fs/gfs2/log.c, line = 116 [ 485.090367][ T5751] CPU: 0 UID: 0 PID: 5751 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 485.090386][ T5751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 485.090392][ T5751] Call Trace: [ 485.090397][ T5751] [ 485.090402][ T5751] dump_stack_lvl+0xe8/0x150 [ 485.090425][ T5751] gfs2_withdraw+0xc3/0x1b0 [ 485.090443][ T5751] gfs2_ail1_flush+0x96a/0xf70 [ 485.090459][ T5751] ? rcu_is_watching+0x15/0xb0 [ 485.090486][ T5751] ? __pfx_gfs2_ail1_flush+0x10/0x10 [ 485.090510][ T5751] empty_ail1_list+0x1b3/0x330 [ 485.090528][ T5751] ? __pfx_empty_ail1_list+0x10/0x10 [ 485.090567][ T5751] ? do_raw_spin_unlock+0x4d/0x210 [ 485.090582][ T5751] __gfs2_log_flush+0x1688/0x1d90 [ 485.090603][ T5751] ? __pfx___gfs2_log_flush+0x10/0x10 [ 485.090615][ T5751] ? down_write+0x16d/0x200 [ 485.090630][ T5751] ? __pfx_down_write+0x10/0x10 [ 485.090649][ T5751] ? call_rcu+0x64b/0x8b0 [ 485.090661][ T5751] gfs2_log_flush+0x34/0x50 [ 485.090675][ T5751] gfs2_kill_sb+0x5c/0x430 [ 485.090694][ T5751] deactivate_locked_super+0xbc/0x130 [ 485.090708][ T5751] cleanup_mnt+0x3d3/0x460 [ 485.090725][ T5751] task_work_run+0x1d9/0x270 [ 485.090743][ T5751] ? __pfx_task_work_run+0x10/0x10 [ 485.090763][ T5751] exit_to_user_mode_loop+0x1fa/0x730 [ 485.090778][ T5751] ? rcu_is_watching+0x15/0xb0 [ 485.090795][ T5751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.090808][ T5751] do_syscall_64+0x353/0x580 [ 485.090822][ T5751] ? trace_irq_disable+0x3b/0x140 [ 485.090836][ T5751] ? clear_bhb_loop+0x40/0x90 [ 485.090854][ T5751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.090865][ T5751] RIP: 0033:0x7f06f059d9d7 [ 485.090899][ T5751] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 485.090908][ T5751] RSP: 002b:00007ffc94fe3718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 485.090921][ T5751] RAX: 0000000000000000 RBX: 00007f06f0631f90 RCX: 00007f06f059d9d7 [ 485.090929][ T5751] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc94fe37d0 [ 485.090935][ T5751] RBP: 00007ffc94fe37d0 R08: 00007ffc94fe47d0 R09: 00000000ffffffff [ 485.090942][ T5751] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc94fe4860 [ 485.090949][ T5751] R13: 00007f06f0631f90 R14: 00000000000765bf R15: 00007ffc94fe48a0 [ 485.090967][ T5751] [ 485.091018][ T5751] gfs2: fsid=syz:syz.0: about to withdraw this file system 2026/07/08 04:53:36 executed programs: 277 [ 490.593474][ T5975] gfs2: fsid=syz:syz.0: file system withdrawn 2026/07/08 04:53:41 executed programs: 283 [ 497.622324][ T6951] loop0: detected capacity change from 0 to 32768 [ 497.809169][ T6951] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 497.847814][ T6951] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 497.898809][ T6951] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 497.956484][ T5975] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 497.977173][ T5975] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 498.207595][ T5975] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 230ms [ 498.233009][ T5975] gfs2: fsid=syz:syz.0: jid=0: Done [ 498.251804][ T6951] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 498.606538][ T6951] gfs2: fsid=syz:syz.0: found 1 quota changes [ 498.725332][ T5751] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 398 [ 498.764026][ T5751] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 498.798102][ T5751] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5751 [syz-executor] gfs2_quota_sync+0x353/0x450 [ 498.824565][ T5751] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 498.852005][ T5751] CPU: 0 UID: 0 PID: 5751 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 498.852018][ T5751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 498.852023][ T5751] Call Trace: [ 498.852026][ T5751] [ 498.852031][ T5751] dump_stack_lvl+0xe8/0x150 [ 498.852051][ T5751] gfs2_withdraw+0xc3/0x1b0 [ 498.852067][ T5751] inode_go_instantiate+0xbc7/0x12c0 [ 498.852089][ T5751] ? __pfx_inode_go_instantiate+0x10/0x10 [ 498.852101][ T5751] ? do_raw_spin_unlock+0x4d/0x210 [ 498.852114][ T5751] ? __pfx_wake_bit_function+0x10/0x10 [ 498.852132][ T5751] gfs2_instantiate+0x168/0x220 [ 498.852149][ T5751] gfs2_glock_wait+0x1d4/0x2a0 [ 498.852166][ T5751] do_sync+0x49c/0xbb0 [ 498.852178][ T5751] ? gfs2_quota_sync+0x353/0x450 [ 498.852193][ T5751] ? __pfx_do_sync+0x10/0x10 [ 498.852209][ T5751] ? gfs2_quota_sync+0x353/0x450 [ 498.852222][ T5751] ? do_raw_spin_unlock+0x4d/0x210 [ 498.852237][ T5751] gfs2_quota_sync+0x353/0x450 [ 498.852254][ T5751] gfs2_sync_fs+0x4c/0xb0 [ 498.852265][ T5751] sync_filesystem+0xee/0x230 [ 498.852283][ T5751] generic_shutdown_super+0x77/0x2d0 [ 498.852299][ T5751] kill_block_super+0x44/0x90 [ 498.852314][ T5751] deactivate_locked_super+0xbc/0x130 [ 498.852327][ T5751] cleanup_mnt+0x3d3/0x460 [ 498.852344][ T5751] task_work_run+0x1d9/0x270 [ 498.852363][ T5751] ? __pfx_task_work_run+0x10/0x10 [ 498.852383][ T5751] exit_to_user_mode_loop+0x1fa/0x730 [ 498.852397][ T5751] ? rcu_is_watching+0x15/0xb0 [ 498.852414][ T5751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.852426][ T5751] do_syscall_64+0x353/0x580 [ 498.852441][ T5751] ? trace_irq_disable+0x3b/0x140 [ 498.852454][ T5751] ? clear_bhb_loop+0x40/0x90 [ 498.852469][ T5751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.852479][ T5751] RIP: 0033:0x7f06f059d9d7 [ 498.852491][ T5751] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 498.852500][ T5751] RSP: 002b:00007ffc94fe3718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 498.852512][ T5751] RAX: 0000000000000000 RBX: 00007f06f0631f90 RCX: 00007f06f059d9d7 [ 498.852519][ T5751] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc94fe37d0 [ 498.852525][ T5751] RBP: 00007ffc94fe37d0 R08: 00007ffc94fe47d0 R09: 00000000ffffffff [ 498.852532][ T5751] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc94fe4860 [ 498.852538][ T5751] R13: 00007f06f0631f90 R14: 0000000000078e86 R15: 00007ffc94fe48a0 [ 498.852556][ T5751] [ 498.852561][ T5751] gfs2: fsid=syz:syz.0: about to withdraw this file system 2026/07/08 04:53:50 executed programs: 288 [ 502.673139][ T6962] loop0: detected capacity change from 0 to 32768 [ 502.749614][ T6962] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 502.782563][ T6962] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 503.595154][ T6962] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 503.646531][ T1248] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 503.689719][ T1248] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 504.173603][ T1248] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 483ms [ 504.229472][ T1248] gfs2: fsid=syz:syz.0: jid=0: Done [ 504.261554][ T6962] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 504.355225][ T6962] gfs2: fsid=syz:syz.0: can't create logd thread: -4 2026/07/08 04:53:58 executed programs: 294 [ 514.774285][ T6992] loop0: detected capacity change from 0 to 32768 [ 514.807085][ T6992] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 514.831996][ T6992] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 514.891095][ T6992] gfs2: fsid=syz:syz.0: journal 0 mapped with 9 extents in 0ms [ 514.914145][ T5430] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 514.927967][ T5430] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 515.085160][ T5430] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 157ms [ 515.109662][ T5430] gfs2: fsid=syz:syz.0: jid=0: Done [ 515.134511][ T6992] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 515.524836][ T6992] gfs2: fsid=syz:syz.0: found 1 quota changes 2026/07/08 04:54:05 executed programs: 301 [ 516.205661][ T5751] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 398 [ 516.242620][ T5751] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 516.266737][ T5751] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5751 [syz-executor] gfs2_quota_sync+0x353/0x450 [ 516.295523][ T5751] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 516.319109][ T5751] CPU: 0 UID: 0 PID: 5751 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 516.319128][ T5751] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 516.319134][ T5751] Call Trace: [ 516.319139][ T5751] [ 516.319144][ T5751] dump_stack_lvl+0xe8/0x150 [ 516.319166][ T5751] gfs2_withdraw+0xc3/0x1b0 [ 516.319184][ T5751] inode_go_instantiate+0xbc7/0x12c0 [ 516.319204][ T5751] ? __pfx_inode_go_instantiate+0x10/0x10 [ 516.319212][ T5751] ? do_raw_spin_unlock+0x4d/0x210 [ 516.319221][ T5751] ? __pfx_wake_bit_function+0x10/0x10 [ 516.319231][ T5751] gfs2_instantiate+0x168/0x220 [ 516.319242][ T5751] gfs2_glock_wait+0x1d4/0x2a0 [ 516.319253][ T5751] do_sync+0x49c/0xbb0 [ 516.319260][ T5751] ? gfs2_quota_sync+0x353/0x450 [ 516.319270][ T5751] ? __pfx_do_sync+0x10/0x10 [ 516.319281][ T5751] ? gfs2_quota_sync+0x353/0x450 [ 516.319290][ T5751] ? do_raw_spin_unlock+0x4d/0x210 [ 516.319312][ T5751] gfs2_quota_sync+0x353/0x450 [ 516.319329][ T5751] gfs2_sync_fs+0x4c/0xb0 [ 516.319341][ T5751] sync_filesystem+0xee/0x230 [ 516.319359][ T5751] generic_shutdown_super+0x77/0x2d0 [ 516.319374][ T5751] kill_block_super+0x44/0x90 [ 516.319388][ T5751] deactivate_locked_super+0xbc/0x130 [ 516.319402][ T5751] cleanup_mnt+0x3d3/0x460 [ 516.319420][ T5751] task_work_run+0x1d9/0x270 [ 516.319439][ T5751] ? __pfx_task_work_run+0x10/0x10 [ 516.319452][ T5751] exit_to_user_mode_loop+0x1fa/0x730 [ 516.319462][ T5751] ? rcu_is_watching+0x15/0xb0 [ 516.319473][ T5751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.319480][ T5751] do_syscall_64+0x353/0x580 [ 516.319539][ T5751] ? trace_irq_disable+0x3b/0x140 [ 516.319553][ T5751] ? clear_bhb_loop+0x40/0x90 [ 516.319567][ T5751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.319577][ T5751] RIP: 0033:0x7f06f059d9d7 [ 516.319589][ T5751] Code: a2 c7 05 1c ed 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 516.319596][ T5751] RSP: 002b:00007ffc94fe3718 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 516.319605][ T5751] RAX: 0000000000000000 RBX: 00007f06f0631f90 RCX: 00007f06f059d9d7 [ 516.319611][ T5751] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc94fe37d0 [ 516.319617][ T5751] RBP: 00007ffc94fe37d0 R08: 00007ffc94fe47d0 R09: 00000000ffffffff [ 516.319623][ T5751] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc94fe4860 [ 516.319629][ T5751] R13: 00007f06f0631f90 R14: 000000000007d357 R15: 00007ffc94fe48a0 [ 516.319644][ T5751] [ 516.319648][ T5751] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 517.012486][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 517.015485][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [host] Command execution timed out after 6m0s